Enable Netlogin Dot1X Guest-Vlan Ports - Extreme Networks ExtremeWare XOS Command Reference Manual

Software version 11.5

Hide thumbs Also See for ExtremeWare XOS:

Table of Contents

ExtremeWare XOS 11.5 supports only the Summit X450 family of switches and the BlackDiamond 8800 series switch.

enable netlogin dot1x guest-vlan ports

enable netlogin dot1x guest-vlan ports [all | <ports>]

Enables the guest VLAN on the specified 802.1x netlogin ports.

Syntax Description

Usage Guidelines

A guest VLAN provides limited or restricted network access if a supplicant does not respond to the

802.1x authentication requests sent by the switch. You configure a guest VLAN only on netlogin ports

with 802.1x enabled; movement to a guest VLAN is not supported on netlogin ports with MAC-based

or web-based authentication. 802.1x must be the only authentication method enabled on the port for

movement to guest VLAN. A port always moves untagged into the guest VLAN.

By default, the switch attempts to authenticate the supplicant every 30 seconds for a maximum of three

tries. If the supplicant does not respond to the authentication requests, the client moves to the guest

VLAN. The number of authentication attempts is not a user-configured parameter.

To modify the supplicant response timer, use the following command and specify the

configure netlogin dot1x timers [{server-timeout <server_timeout>} {quiet-period

<quiet_period>} {reauth-period <reauth_period>} {supp-resp-timeout

<supp_resp_timeout>}]

Before you can enable the guest VLAN on the specified ports, you must create the guest VLAN. To

create the guest VLAN, use the following command:

configure netlogin dot1x guest-vlan <vlan_name>

The following command enables the guest VLAN on all ports:

enable netlogin dot1x guest-vlan ports all

ExtremeWare XOS 11.5 Command Reference Guide

Specifies all ports included in the guest VLAN.

Specifies one or more ports included in the guest VLAN.

enable netlogin dot1x guest-vlan ports

Extremeware xos 11.5